e25f6e688a1fbab452479a0b5fccf56b675e56cab44e160be546a3e9f63230bb | Triage

Sharing

General

Target

02f5d364fd31f5db537a08a98057c470N.exe
Size

92KB
Sample

240801-zpcrdswekk
MD5

02f5d364fd31f5db537a08a98057c470
SHA1

c0549f42e9264fad8e0510868f8d2727e6a9c869
SHA256

e25f6e688a1fbab452479a0b5fccf56b675e56cab44e160be546a3e9f63230bb
SHA512

f72f67189abe37064c6737ec3f837fdb865f5492811bc78821562a615c9660b536fdacd3ba52e577b24756f85a40a23705612fd42b7c7383d1da1551a6f60473
SSDEEP

1536:SNGnIFZV9mgJrBU9I0E4y4roG72oMOfNjXq+66DFUABABOVLefE3:HIj/mgJq9p9romNj6+JB8M3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  02f5d364fd31f5db537a08a98057c470N.exe
- Size
  
  92KB
- MD5
  
  02f5d364fd31f5db537a08a98057c470
- SHA1
  
  c0549f42e9264fad8e0510868f8d2727e6a9c869
- SHA256
  
  e25f6e688a1fbab452479a0b5fccf56b675e56cab44e160be546a3e9f63230bb
- SHA512
  
  f72f67189abe37064c6737ec3f837fdb865f5492811bc78821562a615c9660b536fdacd3ba52e577b24756f85a40a23705612fd42b7c7383d1da1551a6f60473
- SSDEEP
  
  1536:SNGnIFZV9mgJrBU9I0E4y4roG72oMOfNjXq+66DFUABABOVLefE3:HIj/mgJq9p9romNj6+JB8M3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence